Betsson Privacy Policy

Betsson takes your privacy seriously. This Privacy Policy describes how we collect, use, share, and protect your personal data when you use the Betsson betting and casino platform in the UK. We comply fully with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the data handling requirements of our UK Gambling Commission (UKGC) licence.

Information We Collect

Account registration: full name, date of birth, home address, email address, and telephone number
Verification documents: government-issued photo ID and proof of address, required to complete KYC checks
Financial transactions: deposit and withdrawal history, payment method identifiers (full card numbers are never stored)
Betting and gaming activity: sportsbook wagers, casino game history, bonus usage, and account balances
Technical data: IP address, device and browser information, and session behaviour on our platform
Support interactions: chat transcripts, emails, and other correspondence with our customer support team

Why We Use Your Data

To create and manage your Betsson account and deliver our betting and casino services
To verify your identity and age as required under UKGC licence conditions
To process financial transactions accurately and securely
To detect and prevent fraud, money laundering, and patterns of problem gambling
To meet our legal and regulatory reporting obligations
To send account notifications and, where consented, promotional communications
To improve the Betsson platform through anonymised usage analysis

Data Sharing

Payment processors: PCI DSS-certified providers who handle your financial transactions
Identity verification services: to confirm your identity and address in real time
Technology and hosting partners: who operate the platform infrastructure under contractual data processing agreements
Regulatory bodies: the UKGC, HMRC, and other authorities where legally required

Betsson does not sell customer data or share it with third-party advertisers or marketers.

Retention Periods

Account, transaction, and identity records: minimum five years from account closure (UKGC and AML requirements)
Marketing consent data: retained until you withdraw consent, then deleted promptly
Technical and session data: typically 13 months, subject to our operational security requirements
All data: permanently deleted or anonymised after applicable retention periods have expired

Your Rights Under UK GDPR

Right of access: request a copy of the personal data we hold about you
Right to rectification: ask us to correct inaccurate or outdated information
Right to erasure: request deletion where there is no overriding legal basis for retention
Right to restriction: limit our use of your data while a complaint or query is being resolved
Right to portability: receive your data in a machine-readable electronic format
Right to object: opt out of processing on legitimate interests grounds
Right to withdraw consent: unsubscribe from marketing at any time via your account or by email

Contact

For data protection queries or to exercise your rights, contact us at [email protected]. Unresolved concerns may be referred to the Information Commissioner's Office (ICO) at ico.org.uk.

Last updated: February 2026.